Notice on the processing of personal data online

This English version is provided for convenience. In case of any discrepancy, the Italian version prevails.

This notice describes how InWYA S.r.l. processes the data of people who visit the Oscar WiFi website, request information, a demo or a quote, and choose to receive promotional emails. It applies to the website and its contact forms; external websites reached through links have their own notices.

Data controller and privacy contacts

The data controller is InWYA S.r.l., Viale Giacomo Matteotti 53/A, 50052 Certaldo (FI), Italy, VAT No. 05888480489. Telephone: 0571 1820661. Email: info@inwya.com.

The Data Protection Officer (DPO) can be contacted at dpo@inwya.com.

Data provided through the forms

The forms collect name, property or company, email and, if provided, telephone number, role or subject, modules of interest and message. The page from which the request was sent, a technical identifier of the submission and the choices relating to the privacy notice and to promotional emails are also recorded.

The fields marked with an asterisk are required to handle the request. The other fields are optional. The message should contain only the information useful for the contact, avoiding sensitive data or unnecessary data relating to other people.

Requests for information, demos and quotes

The data are used to reply, organise the demo, prepare the quote or handle the request received. The legal basis is the performance of pre-contractual measures taken at the request of the data subject or of the contract, where applicable (Art. 6(1)(b) GDPR). For contacts acting on behalf of a company, the processing is based on the legitimate interest of the controller in managing the professional relationship and following up on the request (Art. 6(1)(f)).

The “I have read the privacy notice” checkbox records that the notice has been read. It does not constitute consent to marketing and does not result in automatic subscription to the mailing list.

Website hosting and application systems

The website uses the server infrastructure managed by InWYA to deliver its services. The infrastructure providers may process the technical data necessary for the operation, maintenance and security of the systems, within the scope of their respective assignments. The up-to-date list of data processors can be requested from the controller or the DPO.

How the request is handled

The website forwards the request to the team by email. Authorised personnel use the data to follow up on the contact.

The form does not send data to Meta for advertising purposes or for conversion measurement. The website does not use the Meta Pixel or the Conversions API for submissions from these forms.

Optional promotional emails

If you tick the dedicated checkbox, your contact details may be used to send promotional emails about InWYA / Oscar services. The legal basis is consent (Art. 6(1)(a) GDPR), which is separate from the contact request and from the preferences on website statistics.

You may choose not to opt in and still receive a reply to your request. Consent can be withdrawn through the unsubscribe link in the emails or by writing to the controller, without affecting the lawfulness of the processing already carried out. See the mailing list notice.

Browsing, security and statistics

The systems that deliver the website and receive requests may process technical data such as IP address, requested resource, date and time, outcome of the request and browser information transmitted by the network protocol. These data are used for the operation of the service, security and abuse prevention, on the basis of the controller’s legitimate interest in protecting its systems.

Google Analytics 4 is loaded only after consent to statistics. This choice can be changed from “Cookie preferences”. Google Signals and ad personalisation are not enabled. The data entered in the form are not sent to Google Analytics; after a successful submission, a statistical event that does not contain the contact details or the message may be recorded.

Details of the tools in use, local storage and preference management are in the cookie policy. The website does not allow comments to be posted on articles.

Recipients and providers

The data may be processed by authorised InWYA personnel and by providers of hosting, application infrastructure and email delivery, within the scope of their respective assignments. For statistics, after consent and when the service is configured, Google Analytics 4 by Google Ireland Limited is used.

If you choose to contact us on WhatsApp, the service is provided by WhatsApp Ireland Limited and its terms and notices also apply. The link on the website alone does not activate the Meta Pixel.

The up-to-date list of data processors can be requested from the controller or the DPO. The data may be disclosed to the authorities where required by law.

Transfers outside the European Economic Area

The use of international providers, including Google, may involve processing outside the European Economic Area. Transfers must take place through the mechanisms provided for in Chapter V of the GDPR, such as an applicable adequacy decision or standard contractual clauses. Information on the safeguards applied and on how to obtain a copy of them can be requested from the controller or the DPO.

Retention

Request data are retained for as long as necessary to handle the contact and any pre-contractual or contractual relationship. They may then be retained to the extent necessary to comply with legal obligations or to establish, exercise or defend legal claims.

Promotional contacts are processed for as long as consent remains valid and the data are relevant to the purpose; if consent is withdrawn, they are excluded from mailings. The information necessary to document preferences or prevent further mailings may be retained for those purposes. Technical data are kept for operational and security needs, with possible further retention in the event of abuse or requests from the authorities.

Rights and complaints

In the cases provided for by the GDPR, you may request access to, rectification, erasure, restriction and portability of your data, object to processing based on legitimate interest and withdraw your consent. To exercise your rights, write to info@inwya.com or dpo@inwya.com.

You may lodge a complaint with the Garante per la protezione dei dati personali (Italian Data Protection Authority) or apply to the judicial authorities. The website does not take decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.